The Question Washington Is Structured Not to Ask
Start with the fact, because the fact is the whole argument. Blood relatives of Qassem Soleimani — the most consequential Iranian military commander of his generation, the architect of a proxy network that killed Americans across two decades — obtained visas, cleared security review, entered the United States, and built a comfortable life in Beverly Hills. They did this while the state their relative commanded was, in real time, financing the killing of American soldiers and working to destabilize an entire region.
The instinct in Washington is to route this into the immigration debate, where it will die a partisan death. Resist that instinct. This is not an immigration story. Immigration asks whether an individual is admissible. Counterintelligence asks whether an admitted individual creates leverage for a hostile state. Those are different questions, screened by different logic, and the gap between them is exactly where this case lives. Nobody with authority wants to answer the plain version — not how they evaded detection, but how the system, working as designed, waved them through.
The answer is uncomfortable because it is structural. The apparatus did not fail at the margins. It failed at its center, doing precisely what it was constructed to do.
The Mechanism, Stripped of Acronyms
American vetting is built around one governing assumption: that risk is a property of the individual. The name gets run against watchlists. The travel history is examined. Known-or-suspected-terrorist designations, criminal records, prior deception — each is a flag attached to a person. If the person in the chair is clean, the person is admitted. The model is elegant, defensible, and roughly a century old in its instincts.
It is also the wrong model for a state adversary. Tehran does not project power through flagged individuals. It projects power through networks, and the most durable node in any network is family. A relative of a senior Islamic Revolutionary Guard Corps commander need carry no weapon, hold no rank, and commit no crime. Their value to the state is positional, not behavioral. They are a channel — for money, for signals, for the quiet collection of who-knows-whom in an American city — and, above all, a point of coercive leverage. A regime that wants something from a well-placed relative abroad does not recruit them. It reminds them who is still inside Iran.
That is the seam. Individual-risk screening scans the applicant and finds nothing, because there is nothing on the applicant to find. Kinship-network risk — the proximity of an admitted person to the command structure of a hostile state — is not a variable the system meaningfully weighs. It has no field for it. So the system returns “clear,” and it is telling the truth by its own definition. The failure is not a missed flag. The failure is the absence of the category.
Screening for the Threat You Were Built to Catch
Here is where the lesson generalizes, because this is not a story about one family or one border. It is a diagnostic of how institutions get compromised: they screen diligently for the risk they were designed to catch, and remain structurally blind to the risk that actually matters.
Every serious organization runs this exposure. The compliance department that clears a counterparty because no single transaction trips a threshold — while missing that the counterparty is a relationship node for a sanctioned network. The corporate security function that vets the hire and never maps the hire’s coercible ties to a foreign state. The private-capital allocator who diligences the individual principal and never asks whose leverage sits behind them. In each case the control is real, the effort is genuine, and the answer is worthless, because the control measures individual behavior in a world where the threat is relational and state-directed. A screening system inherits the threat model of the era that built it, and adversaries evolve faster than institutions rewrite their categories.
What This Means for Your Next Move
Three implications, decision-useful and durable regardless of how this particular case resolves. First, audit your controls for category blindness, not just failure rates. A control that has never returned a hit may be excellent — or it may be scanning for a threat that stopped being the real one years ago. Ask what your screening is structurally incapable of seeing, then decide whether that blind spot is acceptable. Usually no one has ever asked.
Second, shift from individual diligence to relational diligence wherever a state or a network is plausibly in the frame. The question is no longer only “is this person clean.” It is “who has leverage over this person, and what does that leverage put at risk.” That reframe costs little and closes the exact seam this case exposes.
Third, expect the political system to litigate this as an immigration fight and to resolve nothing, because the fight is aimed at the wrong layer. The operators who profit from the moment will be the ones who read it correctly — as a counterintelligence problem — and quietly rebuild their own screening around kinship and leverage before the category becomes obvious to everyone. Advantage, as always, accrues to whoever redraws the map first. The system was never broken. It was answering a question we stopped needing to ask.
